11 matches found
CVE-2020-15575
SolarWinds Serv-U File Server before 15.2.1 allows XSS as demonstrated by Tenable Scan, aka Case Number 00484194...
CVE-2020-15574
SolarWinds Serv-U File Server before 15.2.1 mishandles the Same-Site cookie attribute, aka Case Number 00331893...
CVE-2020-15574
SolarWinds Serv-U File Server before 15.2.1 mishandles the Same-Site cookie attribute, aka Case Number 00331893...
PT-2020-14503
Name of the Vulnerable Software and Affected Versions SolarWinds Serv-U File Server versions prior to 15.2.1 Description The issue allows for XSS, as demonstrated by Tenable Scan. Recommendations For versions prior to 15.2.1, update to version 15.2.1 or later to resolve the issue...
PT-2020-14502
Name of the Vulnerable Software and Affected Versions SolarWinds Serv-U File Server versions prior to 15.2.1 Description The issue is related to the mishandling of the Same-Site cookie attribute. Recommendations For versions prior to 15.2.1, update to version 15.2.1 or later to resolve the issue...
CVE-2020-15573: Improper Neutralization of Input During Web Page Generation
SolarWinds Serv-U File Server before 15.2.1 has a "Cross-script vulnerability," aka Case Numbers 00041778 and 00306421...
CVE-2020-15574: Undefined Security Weakness
SolarWinds Serv-U File Server before 15.2.1 mishandles the Same-Site cookie attribute, aka Case Number 00331893...
PT-2020-14501
Name of the Vulnerable Software and Affected Versions SolarWinds Serv-U File Server versions prior to 15.2.1 Description The issue is related to a Cross-script vulnerability. Recommendations For versions prior to 15.2.1, update to version 15.2.1 or later to resolve the issue...
PT-2020-14504
Name of the Vulnerable Software and Affected Versions SolarWinds Serv-U File Server versions prior to 15.2.1 Description The issue allows information disclosure via an HTTP response. Recommendations For versions prior to 15.2.1, update to version 15.2.1 or later to resolve the issue...
CVE-2020-15576: Undefined Security Weakness
SolarWinds Serv-U File Server before 15.2.1 allows information disclosure via an HTTP response...
CVE-2020-15575: Improper Neutralization of Input During Web Page Generation
SolarWinds Serv-U File Server before 15.2.1 allows XSS as demonstrated by Tenable Scan, aka Case Number 00484194...